Detecting neighbor discovery denial of service attacks against a router
    1.
    发明授权
    Detecting neighbor discovery denial of service attacks against a router 有权
    检测邻居发现对路由器的拒绝服务攻击

    公开(公告)号:US08312541B2

    公开(公告)日:2012-11-13

    申请号:US11826594

    申请日:2007-07-17

    IPC分类号: H04L29/06

    摘要: In one embodiment, a method comprises initiating neighbor discovery in response to detecting an absence of an IP destination address of a received data packet within a neighbor cache, including outputting a neighbor solicitation message targeting the IP destination address into a network served by the router, generating a hash index value based on the IP destination address combined with a randomized token stored in the router, and storing the data packet in a selected one of a plurality of pending message queues in the router based on the corresponding hash index value, each pending message queue configured for storing stored data packets having the corresponding hash index value and awaiting respective solicited neighbor advertisement messages from the network; and detecting whether the router is encountering a neighbor discovery denial of service attack based on a determined distribution of the stored data packets among the pending message queues.

    摘要翻译: 在一个实施例中,一种方法包括响应于检测到相邻高速缓存中接收到的数据分组的IP目的地地址的不存在而启动邻居发现,包括将针对该IP目的地地址的邻居请求消息输出到由路由器服务的网络中, 基于与存储在路由器中的随机化标记组合的IP目的地地址生成散列索引值,并且基于相应的散列索引值将数据分组存储在路由器中的多个未决消息队列中的所选择的一个中,每个等待 消息队列,用于存储具有相应哈希索引值的存储数据分组,并且等待来自网络的相应的被请求的相邻广告消息; 以及基于所确定的等待消息队列中存储的数据分组的分布来检测路由器是否遇到邻居发现拒绝服务攻击。

    Detecting neighbor discovery denial of service attacks against a router
    2.
    发明申请
    Detecting neighbor discovery denial of service attacks against a router 有权
    检测邻居发现对路由器的拒绝服务攻击

    公开(公告)号:US20090024758A1

    公开(公告)日:2009-01-22

    申请号:US11826594

    申请日:2007-07-17

    IPC分类号: G06F15/16

    摘要: In one embodiment, a method comprises initiating neighbor discovery in response to detecting an absence of an IP destination address of a received data packet within a neighbor cache, including outputting a neighbor solicitation message targeting the IP destination address into a network served by the router, generating a hash index value based on the IP destination address combined with a randomized token stored in the router, and storing the data packet in a selected one of a plurality of pending message queues in the router based on the corresponding hash index value, each pending message queue configured for storing stored data packets having the corresponding hash index value and awaiting respective solicited neighbor advertisement messages from the network; and detecting whether the router is encountering a neighbor discovery denial of service attack based on a determined distribution of the stored data packets among the pending message queues.

    摘要翻译: 在一个实施例中,一种方法包括响应于检测到相邻高速缓存中接收到的数据分组的IP目的地地址的不存在而启动邻居发现,包括将针对该IP目的地地址的邻居请求消息输出到由路由器服务的网络中, 基于与存储在路由器中的随机化标记组合的IP目的地地址生成散列索引值,并且基于相应的散列索引值将数据分组存储在路由器中的多个未决消息队列中的所选择的一个中,每个等待 消息队列,用于存储具有相应哈希索引值的存储数据分组,并且等待来自网络的相应的被请求的相邻广告消息; 以及基于所确定的等待消息队列中存储的数据分组的分布来检测路由器是否遇到邻居发现拒绝服务攻击。

    Method and apparatus for load-balancing in a distributed processing system
    3.
    发明授权
    Method and apparatus for load-balancing in a distributed processing system 有权
    分布式处理系统中负载均衡的方法和装置

    公开(公告)号:US07936763B2

    公开(公告)日:2011-05-03

    申请号:US10557405

    申请日:2004-05-18

    IPC分类号: H04L12/28

    摘要: According to an embodiment of the present invention, there is provided a method of routing a message to one of a plurality of available processing systems, comprising the steps of detecting the presence of a destination identifier in the message, and where the presence of the destination identifier is detected, forwarding the message to the processing system identified thereby. Where the presence of the destination field is not detected the steps of determining a destination processing system for processing the message, inserting into the message a destination identifier identifying the determined destination processing system, and forwarding the message to the determined processing system may be performed.

    摘要翻译: 根据本发明的实施例,提供了一种将消息路由到多个可用处理系统之一的方法,包括以下步骤:检测消息中目的地标识符的存在以及目的地的存在 检测到标识符,将消息转发到由其识别的处理系统。 在没有检测到目的地字段的存在的情况下,可以执行确定用于处理消息的目的地处理系统的步骤,可以在消息中插入标识所确定的目的地处理系统的目的地标识符,并将消息转发到所确定的处理系统。

    Communication method and apparatus
    4.
    发明授权
    Communication method and apparatus 有权
    通信方法和装置

    公开(公告)号:US08045466B2

    公开(公告)日:2011-10-25

    申请号:US10901138

    申请日:2004-07-29

    IPC分类号: H04J1/16

    摘要: According to one aspect of the present invention, there is provided a method of sending, from a processing system, a message to a destination identified in the message, the destination being one of a plurality of destinations, the message being sent via an intermediate module, each of the processing system and the destinations being connected to the intermediate module by individual point-to-point connections, comprising: resolving the address of the destination identified in the message; sending the message and the resolved address across the connection to the intermediate module; and at the intermediate module, receiving the message and resolved address, selecting, based on the resolved address, through which of the point-to-point connections the message should be sent; and sending the message through the selected connection.

    摘要翻译: 根据本发明的一个方面,提供了一种从处理系统向消息中标识的目的地发送消息的方法,所述目的地是多个目的地之一,所述消息经由中间模块 处理系统和目的地中的每一个通过各个点对点连接连接到中间模块,包括:解析消息中标识的目的地的地址; 通过连接发送消息和解析的地址到中间模块; 并且在中间模块处,接收消息和解析的地址,基于解决的地址,通过哪个点对点连接来选择消息应该被发送; 并通过所选连接发送消息。

    Method and apparatus for load-balancing in a distributed processing system
    5.
    发明申请
    Method and apparatus for load-balancing in a distributed processing system 有权
    分布式处理系统中负载均衡的方法和装置

    公开(公告)号:US20070058533A1

    公开(公告)日:2007-03-15

    申请号:US10557405

    申请日:2004-05-18

    IPC分类号: H04L12/26

    摘要: According to an embodiment of the present invention, there is provided a method of routing a message to one of a plurality of available processing systems, comprising the steps of detecting the presence of a destination identifier in the message, and where the presence of the destination identifier is detected, forwarding the message to the processing system identified thereby. Where the presence of the destination field is not detected the steps of determining a destination processing system for processing the message, inserting into the message a destination identifier identifying the determined destination processing system, and forwarding the message to the determined processing system may be performed.

    摘要翻译: 根据本发明的实施例,提供了一种将消息路由到多个可用处理系统之一的方法,包括以下步骤:检测消息中目的地标识符的存在以及目的地的存在 检测到标识符,将消息转发到由其识别的处理系统。 在没有检测到目的地字段的存在的情况下,可以执行确定用于处理消息的目的地处理系统的步骤,可以在消息中插入标识所确定的目的地处理系统的目的地标识符,并将消息转发到所确定的处理系统。

    Communication method and apparatus
    6.
    发明申请
    Communication method and apparatus 有权
    通信方法和装置

    公开(公告)号:US20050094582A1

    公开(公告)日:2005-05-05

    申请号:US10901138

    申请日:2004-07-29

    IPC分类号: H04L12/46 H04L29/06 H04L12/28

    摘要: According to one aspect of the present invention, there is provided a method of sending, from a processing system, a message to a destination identified in the message, the destination being one, of a plurality of destinations, the message being sent via an intermediate module, each of the processing system and the destinations being connected to the intermediate module by individual point-to-point connections, comprising: resolving the address,-. of the destination identified in the message; sending the message and the resolved address across the connection to the intermediate module; and at the intermediate module, receiving the message and resolved address, selecting, based on the resolved address, through which of the point-to-point connections the message should be sent; and sending the message through the selected connection.

    摘要翻译: 根据本发明的一个方面,提供了一种从处理系统将消息发送到消息中标识的目的地,目的地是多个目的地中的一个的目的地,该消息经由中间件 模块,每个处理系统和目的地通过单独的点对点连接连接到中间模块,包括:解析地址, - 。 在消息中标识的目的地; 通过连接发送消息和解析的地址到中间模块; 并且在中间模块处,接收消息和解析的地址,基于解决的地址,通过哪个点对点连接来选择消息应该被发送; 并通过所选连接发送消息。

    Method and apparatus for load-balancing
    7.
    发明授权
    Method and apparatus for load-balancing 有权
    负载均衡的方法和装置

    公开(公告)号:US07860095B2

    公开(公告)日:2010-12-28

    申请号:US10577844

    申请日:2004-07-12

    IPC分类号: H04L12/56

    摘要: According to one aspect of the present invention, there is provided a method of outing a message, conveyed in stream through a point-to-point connection to a load-balancing element, to one of a plurality of available processing systems each connected to the load-balancing eilement by separate point-to-point connections, io comprising at the load-balancing element: extracting the message from the stream; detecting in the extracted message the presence of an identifier identifying one of the available processing systems; and where the presence of the identifier is detected, forwarding the message to the processing system identified thereby via the appropriate connection; otherwise determining a destination processing system for processing the message; inserting into the message an identifier identifying the determined destination processing system; and forwarding the message to the processing system via the appropriate connection.

    摘要翻译: 根据本发明的一个方面,提供了一种将消息传送到通过点对点连接到负载均衡元件的消息的方法,其中多个可用处理系统中的一个连接到 通过单独的点对点连接来实现负载平衡的环境,io包括在负载平衡元件处:从流中提取消息; 在提取的消息中检测识别出可用处理系统之一的标识符的存在; 并且在检测到标识符的存在的情况下,通过适当的连接将消息转发到由其识别的处理系统; 否则确定用于处理消息的目的地处理系统; 在所述消息中插入标识所确定的目的地处理系统的标识符; 并通过适当的连接将消息转发到处理系统。

    Method and apparatus for load-balancing
    8.
    发明申请
    Method and apparatus for load-balancing 有权
    负载均衡的方法和装置

    公开(公告)号:US20070147339A1

    公开(公告)日:2007-06-28

    申请号:US10577844

    申请日:2004-07-12

    IPC分类号: H04L12/28

    摘要: According to one aspect of the present invention, there is provided a method of outing a message, conveyed in stream through a point-to-point connection to a load-balancing element, to one of a plurality of available processing systems each connected to the load-balancing element by separate point-to-point connections, io comprising at the load-balancing element: extracting the message from the stream; detecting in the extracted message the presence of an identifier identifying one of the available processing systems; and where the presence of the identifier is detected, forwarding the message to the processing system identified thereby via the appropriate connection; otherwise determining a destination processing system for processing the message; inserting into the message an identifier identifying the determined destination processing system; and forwarding the message to the processing system via the appropriate connection.

    摘要翻译: 根据本发明的一个方面,提供了一种将消息传送到通过点对点连接到负载均衡元件的消息的方法,其中多个可用处理系统中的一个连接到 负载平衡元件通过单独的点对点连接而包括在负载平衡元件中:从流中提取消息; 在提取的消息中检测识别出可用处理系统之一的标识符的存在; 并且在检测到标识符的存在的情况下,通过适当的连接将消息转发到由其识别的处理系统; 否则确定用于处理消息的目的地处理系统; 在所述消息中插入标识所确定的目的地处理系统的标识符; 并通过适当的连接将消息转发到处理系统。